Skip to content

jervis-2.2

Choose a tag to compare

View all tags
@samrocketman samrocketman released this 12 Jan 04:59
· 10 commits to main since this release
jervis-2.2
2600d71

jervis 2.2 - Jan 11th, 2026

Bug fixes

  • SecurityIO.sha256sum padding bug fixed.
  • SecurityIO switching to AES/GCM/NoPadding and old AES functions marked as
    deprecated to be removed in Jervis 2.3.
  • SecurityIO.avoidTimingAttack uses cryptographically secure PRNG.
  • SecurityIO.verifyJsonWebToken does additional JWT structure validation.
  • SecurityIO.isBase64 now checks for base64 padding. Previously, it was
    possible for a String to pass as base64 characters but not be actually valid
    base64.
  • SecurityIO.sha256Sum hex string padding fixed so resulting checksum is always
    valid for 3rd party checksum functions.
  • Fix getBuildContextMap var properly setting a branch name instead of a
    Boolean.

Breaking changes

  • CipherMap encrypted data will be discarded when upgrading to Jervis 2.2.
    Currently, this only affects GitHub app authentication in Jervis and new
    tokens will be issued instead of reusing old tokens within their previous
    expiration. In general, GitHub app issued tokens expire after one hour.

See the full CHANGELOG...

Build environment

$ head -n1 /etc/issue
Pop!_OS 24.04 LTS

$ lsb_release -d
Description:	Pop!_OS 24.04 LTS

$ uname -rms
Linux 6.17.9-76061709-generic x86_64

$ java -version
openjdk version "21.0.9" 2025-10-21
OpenJDK Runtime Environment (build 21.0.9+10-Ubuntu-124.04)
OpenJDK 64-Bit Server VM (build 21.0.9+10-Ubuntu-124.04, mixed mode, sharing)

$ ./gradlew  -version
Downloading https://services.gradle.org/distributions/gradle-8.10.2-bin.zip
.............10%.............20%.............30%.............40%.............50%.............60%.............70%.............80%.............90%.............100%

------------------------------------------------------------
Gradle 8.10.2
------------------------------------------------------------

Build time:    2024-09-23 21:28:39 UTC
Revision:      415adb9e06a516c44b391edff552fd42139443f7

Kotlin:        1.9.24
Groovy:        3.0.22
Ant:           Apache Ant(TM) version 1.10.14 compiled on August 16 2023
Launcher JVM:  21.0.9 (Ubuntu 21.0.9+10-Ubuntu-124.04)
Daemon JVM:    /usr/lib/jvm/java-21-openjdk-amd64 (no JDK specified, using current Java home)
OS:            Linux 6.17.9-76061709-generic amd64

Releases signed with 8D8BF0E242D8A068572EBF3CE8F732347257E65F.

Assets 2
Loading